See CapabilitySecurityModel.