Capsicum support for jot(1)
Limit descriptors and enter capability mode in jot(1).
Submitted by: brueffer (earlier version)
Reviewed by: emaste, jonathan (earlier version)
Sponsored by: Dell EMC Isilon
Differential Revision: https://reviews.freebsd.org/D1345