add ability for a capability to validate a requested function and args