Drop capabilities in lxcsu