The text 65f5a7fe3d3b, as Debian 13 (Trixie) shipped it.
set the calling thread's no_new_privs attribute
PR_SET_NO_NEW_PRIVS(2const) on Linux now
