CAP_KILL
if (!perm || !capable(CAP_KILL))
is_capable &= ns_capable(__task_cred(task)->user_ns, CAP_KILL);
ns_capable(tcred->user_ns, CAP_KILL);