Capabilities are high privileges, traditionally associated with superuser (root),
thus make sure that the most restrictive and necessary capabilities are assigned.

In the best case, no capabilities should be granted at all.