3 ms·systemd-nspawn can drop capabilities too.by Torgo 10y agosystemd-nspawn can drop capabilities too.