Managing Capabilities

Let us answer the second question first. The first thing to understand is that capability
security has nothing to say, of itself, about how you create and who you
give capabilities – other than that both these operations should be deliberate.
So, capability security does not inherently dictate any particular way of managing
capabilities – it is up to the designer to choose an appropriate mechanism.
In the following sections, I describe a few ways to manage capabilities. In
practice, capability systems tend to use some combination of these and other
ideas.