Comment by sparkie

> But you use capabilities all the time... operating system users work that way.

Most operating systems don't have proper capabilities - they use things like ACLS, RBAC, MAC, etc for permissions.

The golden rule of capabilities is that you should not separate designation from authority. The capability itself represents the authority to access something, and designates what is being accessed.