Nice to see more systems architected on object capabilities. It's a more practical security model than ACLs: https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf
Or more succinctly:
> Capability-based security enables the concise composition of powerful patterns of cooperation without vulnerability.