We also run in a VM if we're not running as root, yet we weren't checking this when deciding whether to pass --capability=CAP_BPF or not. Let's fix that. Follow up for 9554ac3052
9554ac3052