Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc