allow acme_updater to give itself the capability sys_resource (fixes #7)

policy/modules/acme-updater.te

@@ -14,7 +14,7 @@ init_system_domain(acmeupdater_t, acmeupdater_exec_t)
 # Local policy
 #
 
-allow acmeupdater_t self:capability { dac_read_search dac_override };
+allow acmeupdater_t self:capability { dac_read_search dac_override sys_resource };
 
 apache_manage_config(acmeupdater_t)
 corecmd_exec_bin(acmeupdater_t)