Basic --cap-add and --cap-drop support for lxc

Docker-DCO-1.1-Signed-off-by: Victor Vieux <vieux@docker.com> (github: vieux)