[E-Lang] defense in depth

[Jonathan S. Shapiro]

> I have to say that an Apache designed for a capability system would
> probably be a very different beast from the Apache we have today. But
> there are things capabilities can do as a bolt-on that are still vastly
> superior to what we can do today without making huge changes to Apache.
> CGI confinement being the easiest example to explain and think about.

It would be quite useful if you could enumerate some of them.