reference to web-key + fragids in capability URLs