...on Linux. For security's sake, make kibcap required on Linux so droproot will always be available.