eis: switch to eis_device_allow_capability()
The previous approach would implicitly allow any capability not known to the server. Switch instead to requiring an explicit 'ok' for any capability the server wants to support.
cc @ofourdan, this is a (necessary) API break