Add BPF for checking [tg]kill(2) arg0

Needs to be current tgid, which may be available as
additional data in struct seccomp_data.
Move BPF implementation of capmode to libcaprights/