Declarative Policies for Capability Control