fix revoke all behavior, make caps printing on verbosity=3 cleaner

[dr-frmr]

Problem

Issue #416

Solution

It seems like revoking all capabilities on process spindown wasn't working for a while, which led to us not observing this issue. Now that RevokeAll is operating as expected, removing capabilities generated by a process when it gets killed or crashes, we need to re-grant capabilities in the OnExit::Restart case.

I came up with a simpler solution: adding a flag to the kill procedure that simply skips over the RevokeAll call. Then I use that flag in the Restart case on process spindown.

Testing

See #416

Docs Update

We should thoroughly document this whole thing -- I'll get on that

Notes

Also made capabilities print more nicely in terminal on verbosity 3.

[nick1udwig]

Works as advertised 👍

Interesting use of metadata field. I don't know that I feel great about it, but it is backwards compatible