add security_opt config option in docker executor.

this matches the --security-opt flag in docker run, and takes a list of ':' separate key/value pairs.

check for more info: https://docs.docker.com/engine/reference/run/#/security-configuration

---

Closes #1475 (closed)