Add support for --cap-add and --cap-drop

Linked to #6687 
I agree a comma separated list of CAPABILIITES.