If setcap fails, fall back to setuid

If setcap fails (because the filesystem or namespace lacks support for
capabilities), fall back to setuid, so the installation doesn't fail. Thanks to
Adam Conrad for the patch! Closes: #860031