allow fsck self:capability { kill };