Capability-based security might be the bees knees, but how would one retrofit it into an existing kernel without breaking backwards compatibility?