add cap memcached:firewall