allow boringssl_self_test self:capability sys_admin;