This is kind of weird to allow some capability containers running that are not going to be associated with the Org in the RR. This may affect governance and seems to allow for inconsistencies in the resource data model.