[seL4] Questions about Capability model