capsicum: wrap the right socket fd

Oops, wrapping the listening socket's FD rather
than the newly bound socket's FD.