Capsicum support for jot(1)

Limit descriptors and enter capability mode in jot(1).

Submitted by: brueffer (earlier version)
Reviewed by: emaste, jonathan (earlier version)
Sponsored by: Dell EMC Isilon
Differential Revision: https://reviews.freebsd.org/D1345