Update lxc cap drop and close fd in init