add support for capAdd
add tests for create container with privileged flag on