move capAdd/capDrop to struct Capabilities