CAP_NFSD_SET
return cap_drop(a, CAP_NFSD_SET);
return cap_combine(a, cap_intersect(permitted, CAP_NFSD_SET));