Just instantiate a new process capabilities here,  like done for NTUsers.
I don't like getting process_capabilities from the filesystem.

Forget about the singleton as it is not work the trouble .... or when you want a singleton, define in  chevah.compat.nt_capabilities not as a class member of NTFilesystem :)