pub fn configure_capability_in_ambient_set( capability: Capability, enable: bool, ) -> Result<()>
Add or remove the specified capability to the ambient set.
prctl(PR_CAP_AMBIENT,…)