nsjail.1: update for new options.
nsjail.1: update for new options.

Also, move the --cap option description so that it follows the
--keep-caps option, which matches the README and seems logical.

google/nsjail,google/nsjail