{ "ambient": [ "CAP_NET_ADMIN", "CAP_NET_BIND_SERVICE" ], "bounding": [ "CAP_NET_ADMIN", "CAP_NET_BIND_SERVICE" ]}