SECBIT_NOROOT (1 << 0)
SECBIT_NOROOT_LOCKED (1 << 1)
SECBIT_NO_SETUID_FIXUP (1 << 2)
SECBIT_NO_SETUID_FIXUP_LOCKED (1 << 3)
SECBIT_KEEP_CAPS (1 << 4)
SECBIT_KEEP_CAPS_LOCKED (1 << 5)