So let's assume that what you say is correct (and I have no reason to doubt it), for example, that what is required is an object capability system and that the

So let's assume that what you say is correct (and I have no reason to doubt it), for example, that what is required is an object capability system and that the Linux kernel doesn't adequately provide this. Can't a generic object capability system then be devised rather than one just tied to D-Bus or systemd or whatever else will be thought of? And hopefully a system that provides local capability and easily allows distributed capability. Because then once we have this then it could possibly be used by the likes of etcd / kubernetes or similar.