700a78335fc2 ("sched: only perform capability check on privileged operation")