Implement libcap support

Use libcap for saving CAP_NET_ADMIN (if --transparent is given) over a
setuid(). We don’t need CAP_NET_BIND_SERVICE as the listening sockets
are established before dropping root.
Merged libcap patch
fix Markdown documentation for libcap
libcap support: print out process capabilities at startup if verbose