I noticed that coreutils doesn't BuildRequires: libcap-dev
If it did, it would auto enable support for copying capabilities.
Also I thought it worth mentioning that coreutils now supports
being built as a single multicall binary (like busybox),
where all functionality is available within 1M,
which could be useful for containers etc.
See the Fedora coreutils-single package for an example of
how this is leveraged from RPM.