add support for configuring audit rules from a bootstrap container

[bcressey]

What I'd like:
I'd like to be able to use auditctl in a bootstrap container to add additional audit rules.

This should be as easy as adding CAP_AUDIT_CONTROL to the other capabilities that bootstrap containers get.

Any alternatives you've considered:
Using a host container or daemonset, though this requires keeping a process around for a one-time node configuration task.