code: func (w *whitelist) drop() error {
  	w.pid.Clear(allCapabilityTypes)
  	w.pid.Set(allCapabilityTypes, w.keep...)
  	return w.pid.Apply(allCapabilityTypes)
  }
docs: // drop drops all capabilities for the current process except those specified in the whitelist.