pub(crate) fn drop_all_capabilities()
Clear the effective, permitted, and inheritable capability sets.