Add docker's add/drop capabilites

Add docker's add/drop capabilites
@thockin POSIX capabilities are too many, may be listed in document is better?