I wonder if this can grow into a capability-based security tool.