Module-level capabilities is an interesting idea. We still don't have process level capabilities though, at least not for native code. Yet another argument for

Module-level capabilities is an interesting idea. We still don't have process level capabilities though, at least not for native code. Yet another argument for wasm and friends, I guess...