Make libcontainer's CapabilitiesMask into a []string (Capabilities). + add support for CAP_FOWNER Upstream-commit: cc84dd09676623961ef8dd2d7a415e10323ef9c3 Component: engine