capng_lock(3) on Linux

The text 57195e1c1a5c, as Debian 13 (Trixie), Debian 12 (Bookworm) shipped it.

lock the current process capabilities settings

capng_lock(3) on Linux now