Capsicum: practical capabilities for UNIX

   Abstract