capabilities: reverse arguments to security_capable