Add support for --cap-add and --cap-drop