Capability-based Security for Redox: Namespace and CWD as capabilities