Add OClass to RecordIdObfuscator.  When decoding, verify that the ORID belongs to the given OClass.
Update capability entity adapter to return the OClass when registering.