changing has_capabilities to is_secured