allow healthd self:capability sys_nice;