add support for cap_add