"Oh, you just [insert complex solution here]"

You need one capability token per principal and resource and perhaps access right.