support for ssl wrapping of capabilities