Wrestling with Linux Capabilities: A Day in the Build System Trenches