Add a `capabilities` metadata attribute

[postmodern]

Add a capabilities metadata attribute for listing the "capabilities" or "abilities" that the exploit grants the user.

capabilities [
  :arbitrary_file_read,
  :command_exec,
  ...
]

This will also require defining a list of command "capabilities".