added an idea for how capabilities and wueries could be defined
Changed old references to "role" to "capability model" to avoid confusiion with traditional rbac terms