code: func SetCapabilities(s *specs.Spec, caplist []string) error {
  	s.Process.Capabilities.Effective = caplist
  	s.Process.Capabilities.Bounding = caplist
  	s.Process.Capabilities.Permitted = caplist
  	s.Process.Capabilities.Inheritable = caplist
  	// setUser has already been executed here
  	// if non root drop capabilities in the way execve does
  	if s.Process.User.UID != 0 {
  		s.Process.Capabilities.Effective = []string{}
  		s.Process.Capabilities.Permitted = []string{}
  	}
  	return nil
  }
docs: // SetCapabilities sets the provided capabilities on the spec
  // All capabilities are added if privileged is true