> (dynamic setting of sets of capabilities in limited space of permissions Vs having unlimited space of permissions) I'm also curious about this, though I suspect the answer is "very bad performance implications"