Although used to implement security, I think the mechanism is really about access. I would simply have named the token "Access Capability" and a system that onl

Although used to implement security, I think the mechanism is really about access. I would simply have named the token "Access Capability" and a system that only uses these for access to be an "Access Capability System" (or "Access Capability Secure"). Specifically adding the word "security" for the token itself rather than the system (to me) conflates it with previous security systems that use indirection and security checks based on the 'other' information. Given that we have "capability-based security" already, I'd say keep it as-is. It's fine if people think they know when they don't as long as they're not the ones creating the systems.