Implementation: memory safety paragraph on capability manager