src/mounts.c: Get constants from <sys/mount.h> instead of relying on <libmount.h>
Rework the capability handling

Instead of constantly calling cap_get_proc(), we now prepare a capability
set when starting the application. We also return a proper error message
when CAP_SYS_ADMIN is missing.
Improve some warning messages.