Remove unused header include
Initial, working version
This program allows granting specific capabilities to non-root processes.
capsh is (IMO) awful to use and I couldn't find an alternative. For some
reason the Debian version misses
--addamb too which makes it effectively
useless. I also can't figure out how to make it
exec() ("chainload") a
set_groups, which are special).
It may be worth setting the bounding set properly.