raw CAP:*: triggers (as it should), so any script that matches it needs to behave correctly (which probably means just not /halt'ing it).