allow zygote self:capability sys_nice;