Use capsicum_helpers(3) that allow us to simplify the code and
its functions will return success when the kernel is built without
support of the capability mode.
This change was initially part of review: https://reviews.freebsd.org/D18744
however instead to clean up all the WITHOUT_CAPSICUM at once, we opted to do incremental changes for safety only.