Running containers with restricted capabilities