You also need to consider whether to allow capabilities to be built as an
unloadable module. If not, then we don't need this hook added back into
SELinux. Otherwise, if it is desired, you also need to reinstate
capability_exit and general modular bits for security/capability.c.