/usr/libexec/snapd/snap-confine root:root 0755
 +capabilities cap_chown,cap_dac_override,cap_dac_read_search,cap_fowner,cap_sys_chroot,cap_sys_ptrace,cap_sys_admin=p
