title: how can a docker container check if it has a capability
body: <p>For example, suppose I have a container which needs the NET_ADMIN capability (keepalived as a container for example). </p>
  
  <p>How can I check, when the container is run, that the capability is actually provided, so that I can add a log / throw an error?</p>