Add support for --cap-add and --cap-drop

Linked to #6687 
capability(ies)? I'd just use capabilities. The plural can mean one or more. Ditto next line.