Make libcontainer's CapabilitiesMask into a []string (Capabilities). + 	add support for CAP_FOWNER

Close #5862