pub fn set_capabilities(pid: Option<Pid>, sets: CapabilitySets) -> Result<()>
capset(_LINUX_CAPABILITY_VERSION_3, pid, effective, permitted, inheritable)