REST API can use @RequiresCapability