diff --git a/roles/bkernel/files/bkernel-site-defaults.cfg b/roles/bkernel/files/bkernel-site-defaults.cfg
index 988af48f8d..4e59d9b3a0 100644
--- a/roles/bkernel/files/bkernel-site-defaults.cfg
+++ b/roles/bkernel/files/bkernel-site-defaults.cfg
@@ -1,6 +1,6 @@
 # mount the pesign socket into the chroot
 config_opts['plugin_conf']['bind_mount_opts']['dirs'].append(('/var/run/pesign', '/var/run/pesign' ))
-config_opts['nspawn_args'] = ['--capability=cap_ipc_lock','--bind=/var/run/pesign']
+config_opts['nspawn_args'] += ['--bind=/var/run/pesign']
 config_opts['plugin_conf']['package_state_enable'] = False
 config_opts['macros']['%bugurl'] = 'https://bugz.fedoraproject.org/%name'
 #config_opts['nosync'] = True