Kernel capabilities

[Woody]

Hi, if an application (I'm thinking jack here) can take advantage of kernel
capabilites, how can/should it be handled by the ebuild? I understand there
are issues:

1) Is the kernel even patched?
2) Security...

What about a 'capabilites' USE flag? If we left it to the user to handle
patching manually then this wouldnt be a security risk and they would
certainly understand the implications if they went to the trouble in the
first place. Suggestions? Ta.