Can you verify that an update consumer which does NOT specify capabilities in the request body (at all), will not wipe out any existing capabilities? (i.e. a partial consumer update which doesn't specify capabilities should NOT clear the set out)