Merge "init: allow services to have no capabilities set"