Clamp CAP_LAST_CAP at /proc/sys/kernel/cap_last_cap's value in the Python bindings test if possible, otherwise use the value from <linux/capability.h> since the kernel now has 37 capabilities upstream, but our builders are not that up to date.
