This provides an example of FreeBSD-specific functionality that does not
belong in the posix module. Specifically, this wraps a couple of the
easy capsicum system calls. To do the rest, we need to make use of a
file descriptor userdata.

As with the previous diff, this isn't really committable yet.