SECBIT_NOROOT (1 << 0) SECBIT_NOROOT_LOCKED (1 << 1) SECBIT_NO_SETUID_FIXUP (1 << 2) SECBIT_NO_SETUID_FIXUP_LOCKED (1 << 3) SECBIT_KEEP_CAPS (1 << 4) SECBIT_KEEP_CAPS_LOCKED (1 << 5)