allow kernel self:capability { kill };