Security API

Expose capabilities