Capabilities


 * Lets pretend:
 * CAP_FULL_SET = -1
 * CAP_EMPTY_SET = 0
 * Possible uids:
 * 0
 * 500
 * Possible fmode
 * 0
 * SUID
 * Possible securebits
 * KEEP_CAPS
 * NO_SETUID_FIXUP
 * NOROOT

*** Means invalid config. SUID + fcaps