is it because it essentially allows you to define those capabilities on the role almost as "attributes" or leaves rather than being relations to yet another definition? (e.g. a "permission" definition)