Composing capability security and conflict-free replicated data types

Since a CRDT is an idempotent commutative monoid, and the set-union operator is commutative and idempotent with a monoidal unit given by the empty set, there is a natural CRDT of capabilities: a set of capabilities!