capabilities.conf: try to clarify what system calls are in here

[emaste]

sys/kern/capabilities.conf

34

maybe "no purpose, so they are not listed here and not permitted in capability mode."

[emaste]

sys/kern/capabilities.conf

31

by "fully or partially" I'm trying to convey that the system call either never accesses gn or aa (say, close), or internally performs capability mode checks (say, openat). Would be good to have a way to concisely express this.

[jhb]

sys/kern/capabilities.conf

31

s/absense/absence/

34

I would drop the comma after "purpose" and keep the text you have. Maybe add a comma after "In capability mode"