@cascardo that sysctl does indeed change when/if bpf_capable() is called, so a possibility to explore.
@cascardo that sysctl does indeed change when/if bpf_capable() is called, so a possibility to explore.