add support for dnsSearch and capDrop