pub(crate) fn drop_privileges_for_observers() -> Result<()>Expand description
Drop the calling thread’s capability sets and restore process inspection. Call after privileged setup. Earlier-created threads retain their own capabilities; a subsequent privileged initialization requires re-exec.