NOCAP_FLAGS
if (req.flags != NOCAP_FLAGS && !capable(CAP_NET_ADMIN))
if (dev->flags != NOCAP_FLAGS && !capable(CAP_NET_ADMIN)) {