Ask HN: What happens when capability decouples from credentials? | Dark Hacker News