Add capability check for each variant of holdfp

Also change getfp_locked by fdvalidate, since we don't need the
file pointer
Convert holdvnode to the capsicum API