libdrop_ambient(7) on Linux

The text 55a8a2d5e559, as Debian 13 (Trixie), Debian 12 (Bookworm) shipped it.

force application started with ambient capabilities to drop them