open.2: Document Capsicum behavior

Document open(2) and openat(2) behavior in Capsicum capability mode.

Reviewed by: ed (previous version), emaste, rwatson (previous version),

		wblock

Sponsored by: Dell EMC Isilon
Differential Revision: https://reviews.freebsd.org/D7947