`gdb` is unfortunately not the parent of the watchdog, because `ExecuteBinary()` does a double-fork and therefore detaches it... I tried to extend `ExecuteBinary()` to make the double-fork optional but didn't manage to wrap my head around that code.
`PR_SET_PTRACER_ANY` would certainly work, but I didn't want to open the full gate here, if it is not necessary.
Maybe it makes sense to do some refactoring in the watchdog and throw some complexity out... the whole thing feels pretty hacky and shaky to me. Also, I think, we might get around the re-gain of root permissions on SLC somehow... The main roadblock to not using CAPABILITIES here was the lack of the gdb-PID which now is in reach.