Apparently this the config item (CONFIG_SECURITY_CAPABILITIES) and the module it creates (capability(.ko)) are obsolete after kernel 2.6.26 (reference http://cateee.net/lkddb/web-lkddb/SECURITY_CAPABILITIES.html). I'm running testing (2.6.32) but can't find it in any distribution.