Instead of digging into the internals, just use `capability_host_chain` here, a public API.