Split out syscall compatibility from Capsicum compatibility
Commonize forked unit test infrastructure
Split capability mode tests into smaller chunks
Turn on -Wall and fix warnings