A list of new line separated capabilities.

Each line represents an option for the --cap-drop parameter sent to the docker server. Each one must be a known capability "Key" as per the docker documentation.

Please check https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities for further information.