The text 2f48fc472f58, as Debian 12 (Bookworm) shipped it.
clear chosen capabilities set
capng_clear(3) on Linux now
