Shadow-utils filecaps not set correctly.

[rhatdan]

podman run quay.io/centos-bootc/centos-bootc:stream9 rpm -qV shadow-utils | grep /usr/bin/new.*map
.......TP /usr/bin/newgidmap
.......TP /usr/bin/newuidmap

If you do a
RUN rpm --setcaps shadow-utils
It fixes the issue. I think the tooling that builds the image is dropping file capabilties.