add specifying capabilities to principal create