Fixing CAP_SETPCAP

@zooko: No, it's not. Linux capabilities are basically about replacing suid bits with something more fine-grained, and it doesn't improve security much, IMHO, although it's nice from the marketing point of view - "hey, look, no suids!".

In other words, Linux capabilities are about giving additional privileges to processes, and what you're asking for is about adding additional restrictions to processes.