When local ObjectCapabilityModel islands are hooked together by a PasswordCapabilityModel cryptographic protocol.
Distributed object-capability systems include:
CategorySecurity CategorySecurityModel