it doesn't currently mean anything to dirty the FILE_RD cap.. i think we should mask need with FILE_WR here, or in mark_caps_dirty().

maybe later we'll support atime and do something with FILE_RD, but until then i worry about confusing other code