Function drop_privileges 

pub fn drop_privileges<S: Syscall + ?Sized>(
    cs: &LinuxCapabilities,
    syscall: &S,
) -> Result<(), SyscallError>

Drop any extra granted capabilities, and reset to defaults which are in oci specification