68cfa78
Fix newrole to retain cap_audit_write when compiled with namespace, also do not drop capabilities when run as root.