* we should not drop any capabilities for root * we should not clear bounding capabilities for other users * we should probably retain the supplement groups