Add docker's add/drop capabilites

Add docker's add/drop capabilites
or Capabilities: { Set, Add, Drop []string } ?