cap_lower
cap_lower(creator_cred->cap_effective, CAP_SYS_RESOURCE);
cap_lower(new->cap_bset, cap);
cap_lower(new->cap_ambient, arg3);