Only capsicumize in case of direct call to direct files

For now diffing directories is not capsicumized as it needs more work