pub fn configure_capability_in_ambient_set( capability: impl CompatCapability, enable: bool, ) -> Result<()>
Add or remove the specified capability to the ambient set.
prctl(PR_CAP_AMBIENT,…)