security: filesystem capabilities no longer experimental