The kernel stores capability sets in /proc/*/status as hex bitmasks, so a name-based grep finds nothing; use pscap or test bit 9 (0x200) of each CapEff line to list processes that can toggle the immutable flag.