Support a "live" mode in ktrdump enabled via the -l flag. In this mode,
ktrdump polls the kernel's trace buffer periodiocally (currently hardcoded
as a 50 millisecond interval) and dumps any newly added entries.
While here, fix some bugs from when this was Capsicum-ized:
- Use caph_limit_stream() for the output stream so that isatty() works and the output can be line-buffered (especially useful for live mode).
- Use caph_limit_stderr() to permit error messages to be displayed if an error occurs after cap_enter().