Merge "Simplify POSIX capabilities to bitmask" into main