Allow CloudABI processes to create shared memory objects.

Summary:
Use the newly created kern_shm_open() function to create objects with
just the rights that are actually needed.

Reviewers: jhb, kib

Subscribers: imp

Differential Revision: https://reviews.freebsd.org/D3260