Unlike the ObjectCapabilityModel, this model is discretionary. (See the discussion of "discretionary" models in ParadigmRegained.)
Systems in the CapabilitiesAsKeysModel include
CategorySecurity CategorySecurityModel