Use new-style CAP_EVENT rather than CAP_POLL_EVENT
Capsicum-Linux now produces a capability from accept(2)
Confirm other child processes are unaffected by cap mode