allow kernel self:capability kill;