code: func Get() Capabilities {
  	capInstance.lock.Lock()
  	defer capInstance.lock.Unlock()
  	// This check prevents clobbering of capabilities that might've been set via SetForTests
  	if capInstance.capabilities == nil {
  		Initialize(Capabilities{
  			AllowPrivileged: false,
  			PrivilegedSources: PrivilegedSources{
  				HostNetworkSources: []string{},
  				HostPIDSources:     []string{},
  				HostIPCSources:     []string{},
  			},
  		})
  	}
  	return *capInstance.capabilities
  }
docs: // Get returns a read-only copy of the system capabilities.