allow sys_chroot cap on SCCs (commit: 2d59f8e)
UPSTREAM: 49420: Fix c-m crash while verifying attached volumes (commit: aa890a3)