Add support for --cap-add and --cap-drop

Linked to #6687 
See note about capability(ties).