libcap-ng-0.8.1

This is a bug fix release. See the changelog for details. This release adds libdrop_ambient which can be LD_PRELOAD'ed to any application that inherits ambient capabilities to force it to drop ambient capabilities so they don't leak everywhere. This is particularly useful if you see a daemon using systemd's capabilities facility since that is how it bestows capabilities on a process. But its up to the process to drop them. Not all do.

Only other thing to be aware of is that capng_apply is now more aggressive with returning errors. This means that code that was "working fine" may now have an error. But the reality was that it was silently failing unknown to it. I have only seen one problem and filed an upstream issue. But be aware in case there are more.