Introduce is_owner_or_cap() to wrap CAP_FOWNER use with fsuid check