MFH (r263234, r263691, r266465, r290671, r290672, r290673, r290674,
r294320, r294322, r294324, r294330, r294469, r294494, r294466)

Reduce diffs to head in preparation for removing HPN and None.

Merge an applicable subset of r263234 from HEAD to stable/10:

Update most userspace consumers of capability.h to use capsicum.h instead.

auditdistd is not updated as I will make the change upstream and then do a
vendor import sometime in the next week or two.

Note that a significant fraction does not apply, as FreeBSD 10 doesn't
contain a Capsicumised ping, casperd, libcasper, etc. When these features
are merged, the capsicum.h change will need to be merged with them.

Sponsored by: Google, Inc.

MFH (r263712): upgrade openssh to 6.6p1
MFH (r264308): restore p level in debugging output

MFC r261499 (pjd):

Fix installations that use kernels without CAPABILITIES support.

MFH (r261320): upgrade openssh to 6.5p1
MFH (r261340): enable sandboxing by default

Merge an applicable subset of r263234 from HEAD to stable/10:

Update most userspace consumers of capability.h to use capsicum.h instead.

auditdistd is not updated as I will make the change upstream and then do a
vendor import sometime in the next week or two.

Note that a significant fraction does not apply, as FreeBSD 10 doesn't
contain a Capsicumised ping, casperd, libcasper, etc. When these features
are merged, the capsicum.h change will need to be merged with them.

Sponsored by: Google, Inc.

MFH (r263712): upgrade openssh to 6.6p1
MFH (r264308): restore p level in debugging output

MFC r261499 (pjd):

Fix installations that use kernels without CAPABILITIES support.

MFH (r261320): upgrade openssh to 6.5p1
MFH (r261340): enable sandboxing by default