add security_opt config option in docker executor.

this matches the --security-opt flag in docker run, and takes a
list of ':' separate key/value pairs.

check for more info:
https://docs.docker.com/engine/reference/run/#/security-configuration

---
Closes #1475

See merge request !215