Identify collector's required capabilities

[Stringy]

Following removal of kernel modules, collector will be running with all capabilities (as a privileged container.) To harden the collector process, we should drop all capabilities that we don't require.

• Identify required capabilities for running the various collector components
  • Kernel driver (eBPF/CORE bpf)
  • conn scraper
  • self-check process
• Implement a collection-method agnostic way of dropping capabilities once startup has concluded.
• Identity if any mounts are no longer needed