> Unfortunately, that leaves no option but to have at least one capability per > object, i.e., no wildcards. That may not be a problem for capability OSes > like EROS, but I believe it is when capabilities are cryptographically > secure certificates. Since the E programming language and environment appear to be a counterexample, I'ld encourage stress-testing this belief.