Proposal for capabilities

Can ssh would be policy, which is dependent on who you are.  Account is really tied to billing, its the entity that will get billed, so it has a set of constraints on resources that can be allocated across everything owned by the account.