dontaudit profcollectd self:capability sys_admin;