capability-based-security public under access-control 3 List Picture As a command %3 n0 capability-based-security n1 access-control n1->n0