capctl::caps::ambient
pub fn lower(cap: Cap) -> Result<()>
Lower the given capability in the current thread's ambient capability set.