kernel: conditionally support non-root users, groups and capabilities