filecaps_free_prep() bzeros the capabilities structure and we need to be
careful to synchronize with unlocked readers, which expect a consistent
rights structure.
I'm not really sure it's even worth keeping filecaps_free_prep(), since it's
doing some unnecessary work.