capabilities: add description for CAP_SETFCAP