I find it hard to teach capability-based access control. One issue is that the only concrete reference is Unix, and that combines both ACLs and capabilities. The design is clever but a side-effect is that the overall picture becomes muddled in students' minds.
I could imagine a vaguely Unix-like OS that is entirely capabilities, no ACLs. And I could imagine some kind of diagram or animation showing how capabilities flow around the system. Is anyone ahead of me on this? Hmm... maybe next year.
@monkey1 This looks really neat -- thanks! Always interested in new distributed programming models. I will take a closer look.