Options to manage capabilities bounding set
Add PR_SET_NO_NEW_PRIVS support
Capability setter (WiP)
Checks for set*id
Fix insufficient arguments for prctl
Use SECBIT_KEEP_CAPS to avoid clashing with setuid