The Capability check handles merging of Default capabiltiies along with user specified add and drop capabilities. Fork docker/docker/oci/caps file to prevent a huge vendor Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>