core: more user-friendly errors for caps on guests