The text f3a2c0e5cb89, as FreeBSD 11.4-RELEASE shipped it.
Capsicum capability rights for file descriptors
rights(4) on FreeBSD now