Object-capability model
 
x
OK