Currently I'm assuming that we want the grant callbacks to actually see
the granted cnode. Therefore, we need to roll-back if the grant callback
aborts the grant operation.

The additional comments about the libcap callbacks just explain their
semantics in greater detail.