Efficiency 2:
Most operations e.g. calculation of
capabilities are cached
Tn is totally dynamic, so if something changes
the effect promulgates throughout the system.
This makes rescinding capabilities easy
There will be some cost, but we think it will
be unnoticeable on modern computers