[ryanjshaw]

Security is a pretty broad topic and it's not really my speciality I'm afraid.

That being said, I used to be very interested in capability-based security because it promised solutions to so many security problems but nobody seemed to know about the ideas, and the people who had heard the term often had significant misunderstandings of what was possible with capabilities.

It's been about 20 years but I mostly had it right ;)

"No designation without authority"

This is a great place to start: https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf