r325740 moved dhclient to the cap_syslog service, while r341692
changed cap_syslog to inherit stdio descriptors from its parent process.
The broke the ability to capture dhclient's foreground output, as the
cap_syslog service now holds the original stdio descriptors open after
dhclient daemonizes. Add a new libcasper(3) call, cap_close_stdio()
to allow a parent process to revoke stdin/stdout/stderr access from a
casper service, and consume that call in dhclient.