> A capability-based design should be able to systematically prevent this kind of problems. I think Entitlements could be considered a type of capability? And

> A capability-based design should be able to systematically prevent this kind of problems. I think Entitlements could be considered a type of capability? And if so, then you're right on your this point, as the solution was to require an entitlement to talk to the daemon itself.