Trim some warnings and notes from capabilities.conf -- these are left over
from Capsicum development, and no longer apply.

Approved by:	re (xxx)
Sponsored by:	Google Inc

Index: capabilities.conf
===================================================================
--- capabilities.conf	(revision 224841)
+++ capabilities.conf	(working copy)
@@ -196,7 +196,7 @@
 
 ##
 ## Allow various file descriptor-based I/O operations, subject to capability
-## rights.  mmap(2) requires further attention.
+## rights.
 ##
 freebsd6_ftruncate
 freebsd6_lseek
@@ -334,8 +334,6 @@
 ## Allow kevent(2), as we will authorize based on capability rights on the
 ## target descriptor.
 ##
-## XXXRW: Do we do this?
-##
 kevent
 
 ##
@@ -404,9 +402,6 @@
 ## Allow memory mapping a file descriptor, and updating protections, subject
 ## to capability rights.
 ##
-## XXXRW: We currently don't properly mask VM protections using capability
-## rights.
-##
 mmap
 mprotect