err(2, "unable to limit stdio");
caph_cache_catpages();
tzset();
if (cap_enter() < 0 && errno != ENOSYS)
err(2, "unable to enter capability mode");
}