Convert call-handling syscalls to capabilities