client: show available capabilities

It would be very helpful if the client were to display the various potential capabilities for a given command. For instance, when creating a user, it would be nice to know which user capabilities are available. Similarly, when changing a VM's access, etc.