[Sssd-maintainers] [Bug 2320133] When installing sssd-ipa package in rpm-ostree image, selinux_child loses capabilities defined in the RPM package