Note that even with the
.B SECBIT_KEEP_CAPS
flag set, the effective capabilities of a thread are cleared when it
-switches its effective UID to a nonzero value. However, if the effective
-UID is already nonzero and a thread subsequently switches all other UIDs
-to nonzero values, then the effective capabilities will not be cleared.
+switches its effective UID to a nonzero value.
+However,
+if the thread has set this flag and its effective UID is already nonzero,
+and the thread subsequently switches all other UIDs to nonzero values,
+then the effective capabilities will not be cleared.
.IP
The setting of the
.B SECBIT_KEEP_CAPS