Make list of capabilities private

The capability reply has the list of capabilities available as a public
instance member. We are however moving away from public instance
variables. Make the list of capabilities private and allow access
through a method instead.

Signed-off-by: Marcus Karlsson <mk@acc.umu.se>