Change virt.te to match default docker capabilies

Add additional booleans for turning on mknod or all caps.

Also add interface to allow users to write policy that matches docker defaults
for capabilies.
Merge branch 'rawhide-contrib' of github.com:selinux-policy/selinux-policy into rawhide-contrib