This command getcap -r / generates a gazillion warnings because of things like this: Failed to get capabilities of file '/proc/183650/task/183650/net/fib_triestat' (Operation not supported) we should either silently ignore operation not permitted problems, or skip /proc/ altogether by default.
https://git.kernel.org/pub/scm/libs/libcap/libcap.git/commit/?id=f223de46154a3d2644914ea358d5c69b36770459