I thought WASM allowed capability based permissions for the code running inside, or has that fallen by the wayside, which was my sad expectation?