Add support for --cap-add and --cap-drop

Linked to #6687 
Sentence doesn't make sense. Perhaps:

The `hostConfig` option now accepts the field `CapAdd`, which adds a list of capabilities, and `CapDrop`, which specifies a list of capabilities to drop.