allow fsck self:capability { sys_admin kill };