drop capabilities #8
Description
The default capabilities that Docker gives to every container are a bit broad - we probably don't need most of them.
Docker allows to remove capabilities from a container, but this isn't yet supported in swarm mode. It will be in 20.04, however.