mon: transition from MonCap -> MonCaps

Convert all monitor users to use the new MonCap class.

Simplify the semantics around auids by essentially dropping any meaningful
permissions enforcement around them.

Signed-off-by: Sage Weil <sage@inktank.com>
mon/MonCap: avoid typedef for mon_rwxa_t

This conflicts later because we have an operator<< for __u8 in OSDCap, too.
That one also needs to be similarly converted.

Signed-off-by: Sage Weil <sage@inktank.com>
osd/OSDCap: avoid typedef for rwxa_t; rename to osd_rwxa_t

Avoid implementing an operator<< on __u8, and make the naming less likely
to conflict with others.

We did a similar thing with MonCap.

Signed-off-by: Sage Weil <sage@inktank.com>
ceph-object-corpus: note MForward encoding change

Signed-off-by: Sage Weil <sage@inktank.com>
mon/MOnCap: fix command parsing

Signed-off-by: Sage Weil <sage@inktank.com>
mon/MonCap: add 'allow profile <foo> x'

Signed-off-by: Sage Weil <sage@inktank.com>
mon/MonCap: revise grammar

 allow rwx
 allow service rwx
 allow profile foo
 allow command bar
 allow command bar with k1=v1 k2=v2

Signed-off-by: Sage Weil <sage@inktank.com>
mon/MonCap: define a few profiles

 - osd, mds, mon (daemons)
 - fs-client (can mount fs)
 - simple-rados-client (can use existing rados pools)

Signed-off-by: Sage Weil <sage@inktank.com>
vstart.sh: use new mon cap profiles

Signed-off-by: Sage Weil <sage@inktank.com>
mon/MonCap: debug is_capable

Signed-off-by: Sage Weil <sage@inktank.com>