Add and use EXPECT_RIGHTS_EQ macro
Use cap_rights_t* not cap_rights_t in rights-related macros.

This is more consistent with the new-style Capsicum API.