I wrote about the possibility of this with fd passing in a recent blog post: https://mdaverde.com/posts/cap-bpf/
I'm also working on agent that allows for this at https://bpfdeploy.io/