Parity

@cjellick @ibuildthecloud 
"ALL" is an option too:
http://blog.docker.com/tag/docker-1-2/ (see example: docker run --cap-add=ALL --cap-drop=MKNOD)