improve validation

• detect minimum kernel version
• detect only the required capabilities
• automatically bump the rlimit to load the ebpf program

docker pull aojea/netkat:0.1.1