CaptureThreatsExtractor's THREATEN CAP feature is *almost* working--see TODOs in the file.