Add docker's add/drop capabilites

Add docker's add/drop capabilites
Cap is somewhat ambiguous (to an outsider) - any reason not to use "AddCapabilities" and "DropCapabilities"?