Add CHANGES entry

4966.	[bug]		Non-libcap builds were not checking whether all
			requested capabilities are present in the permitted
			capability set. [GL #321]
10 jobs for 321-only-request-permitted-capabilities-in-non-libcap-builds in 8 minutes and 12 seconds (queued for 1 second)