crypto/cnxk: prevent out-of-bound access in capabilities