Agree, and we're slowly seeing more "capabilities lite" functionality in Unix-like OSes. I think the next step is a capability runtime OS with a kernel persona

Agree, and we're slowly seeing more "capabilities lite" functionality in Unix-like OSes. I think the next step is a capability runtime OS with a kernel personality for Linux for backwards compatibility. Sort of the converse of what we're doing right now.