Capability-Based Security for Redox: Namespace and CWD as Capabilities