security_bpf_token_capable
extern int security_bpf_token_capable(const struct bpf_token *token, int cap);
if (token && security_bpf_token_capable(token, cap) < 0)