Make capabilty required symbolic
Make blacklist inaccessible in main thread
Refactor io to separate process. Add tests