There&#x27;s a paper called &quot;Capability Myths Demolished&quot; that addresses this. There&#x27;s an online version here[0], see &quot;revoking access&quot;.<p>Personally I&#x27;m fascinated by ocap systems and am always looking for ways to employ them. There are some interesting &quot;modern&quot; applications (aside from a couple of research kernels) like CapnProto and Pony language. Macaroons come close but are more of a hybrid approach to authorization. (They don&#x27;t out of the box prevent confused deputy or anything)<p>[0]: <a href="http:&#x2F;&#x2F;www.erights.org&#x2F;elib&#x2F;capability&#x2F;duals&#x2F;myths.html" rel="nofollow">http:&#x2F;&#x2F;www.erights.org&#x2F;elib&#x2F;capability&#x2F;duals&#x2F;myths.html</a>