and also removes cap_add SYS_ADMIN
# general
c
and also removes cap_add SYS_ADMIN