check_capability: explicitly target recent linux implementations