code: func (w *whitelist) dropBoundingSet() error {
  	w.pid.Clear(capability.BOUNDS)
  	w.pid.Set(capability.BOUNDS, w.keep...)
  	return w.pid.Apply(capability.BOUNDS)
  }
docs: // dropBoundingSet drops the capability bounding set to those specified in the whitelist.