Correct, but once you've done that you can strip the capability information and pass the raw address around to the safe code because the compiler runs validation.