Add docker's add/drop capabilites

Add docker's add/drop capabilites
FYI, the Docker PR that added capabilities was here:
https://github.com/docker/docker/pull/6968/files

The set of capabilities currently granted by default by Docker is here:
https://github.com/docker/docker/blob/master/daemon/execdriver/native/template/default_template.go