Allow getloginclass in capability mode

As with e.g. getgroups and getlogin it allows querying current process
credential state.

Reported by: sigsys@gmail.com via kevans
Sponsored by: The FreeBSD Foundation