Add decryption-only capability, and capability reporting.
Strip to dos.
Update to conform to capabilities API changes.