Add healthy procfs/sysfs warnings
Add note about lxc.cap.keep > lxc.cap.drop