darwin: use detach kernel APIs for capture