LIDS-only Capabilities

CAP_HIDDEN
Hide process from /proc (ps, pstree, lsof, etc).

CAP_PROTECTED
Ignore any signals from normal userland processes.

CAP_KILL_PROTECTED
Ability to send signals to CAP_PROTECTED processes.