protect capability function names