If you skipped everything else in Marc's post, you should at least read this one sentence, which summarizes the position perfectly: Marc Stiegler writes: >It is really not acceptable for the default behavior of a capability >language to be a security breach. -dan