daemon: cap-get-file: Return empty string if no capability on file (RHBZ#989356).

Return an empty string (instead of an error) if no capabilities are
set on a file, and document that in the API.