capability: determine CAP_LAST_CAP dynamically
capability: determine CAP_LAST_CAP dynamically

New capabilities can be added, and we want to be sure
that a bounding set will be set correctly in this case.

Without this patch new capabilities are not dropped from a bounding set.

Signed-off-by: Andrey Vagin <74c05afa918858348d6db8037d82fa8124870113@openvz.org>

tianon/debian-golang-gocapability,syndtr/gocapability