NNP can not be unset, hence `set_no_new_privs(false)` does semantically makes no sense. Also manpages says: > `int prctl(PR_SET_NO_NEW_PRIVS, 1L, 0L, 0L, 0L);` > … > **EINVAL** The second argument is not equal to 1L. --- @sunfishcode can you add `semver bump` label