add cap_sys_admin and cap_setgid to dotnet-launcher to use candidate process