When doing chroot
     * we should not drop any capabilities for root
     * we should not clear bounding capabilities for other users
     * we should probably retain the supplement groups