Odd behaviour with CAP_SYS