aliases: d-r -> docker run with --rm and caps dropped

rc.xsh

@@ -120,6 +120,8 @@ def timestamp_iso_local():
     return timestamp_now_local().strftime('%Y%m%dT%H%M%S%z')
 
 aliases['d'] = ['sudo', 'docker']
+aliases['d-r'] = ['d', 'run', '--rm=true',
+                  '--cap-drop=all', '--security-opt=no-new-privileges']
 aliases['dpkg-welse'] = lambda args: '\n'.join(dpkg_welse(args[0]))
 aliases['dpkg-which'] = lambda args: '\t'.join(dpkg_which(args[0]))
 aliases['g'] = ['git']