Introducing the share capability.
Derive new read/write capabilities to give to other people.
Derived cap includes source information.
Bob gives Alice a share capability. Alice gives Carol a read capability.
Bob didn't want Carol to have access. Bob can revoke Carol's cap, or revoke Alice's share cap which revokes all derived caps.