Add option indicating whether a capability with CAP_MASK_VALID behaves
exactly the same as a non-capability.

Linux: No,  FreeBSD: Yes
Add test for openat(cap_dir, "subdir/../../escape!")
Fix formatting of rights in smoketest
Tidy up file after SocketTransfer test
Test following symlinks via capability dir outside of capability mode