Capability-based security for Redox: namespace and CWD as capabilities