query for CAP_SYS_RESOURCE and allow raising hard file limit

For -steal_fds we emulate the file number limit. We should allow raising the hard limit (up to our stolen fd value) if the process has CAP_SYS_RESOURCE. This issue covers implementing that.