esfilter: fix ONCE rule again
capmt: fix the shutdown/free sequence