bpf: net: Change do_ip_setsockopt() to use the sockopt's lock_sock() and capable()