Intelligently use capabilities/privileges and drop what we don't need for Mac OS X

This is the ticket where we will discuss caps/privs stuff on Mac OS X with a distinct preference for 10.6 and above.