Remove capabilities; they provide no real access control

Reviewers: marcua

Reviewed By: marcua

Differential Revision: http://phabricator.locu.com/D3246