He's talking about capability security. Look up the Joe-E programming language for a capability secure subset of Java if you want an idea of what sort of properties such a language must have.