remove patch d524a35c49bdbf7132f91ac7678cbb9876091a68.patch, "lxc.cap.drop = sys_admin" fixed upstream