bpf: Implement CAP_BPF