Both of these problems are resolved by capabilities