kernel-netlink: Make CAP_NET_ADMIN capability optional