Fix --soaap-sandbox-model=annotated

We assume a capability model so if there are no annotations, then they are not allowed.