Don't pass in the (local) capabilities to the packet from gndo
when initalizing the sandbox.  They prevent memcpy_c from copying the
structure.
Use up to date support bits from libc_cheri.
When in capability mode, make netdissect_options be all capabilities.
Fix up permissions so tcpdump works enough to start parsing packets
and prints some output.