pci: use security_capable() when checking capablities during config space read