Configuring capabilities instead of setuid binaries