nspawn: introduce --capability=all for retaining all capabilities