Make setcap optional via attribute.

If you are running node on a port higher than port 1024, you might not
want to grant the NET_BIND_SERVICE capability to the node binary. Also
needed for Docker containers which don't support setcap on AUFS.