__cap_gained
__cap_gained(permitted, new, old)) ||
__cap_gained(ambient, new, old))))
if (__cap_gained(permitted, new, old))
if ((id_changed || __cap_gained(permitted, new, old)) &&