src/daemon/common.c: avoid leaking cap_header in error condition