Capability manipulation instructions

There are four subclasses of capability actions:

• reduce access bits
• read or write datum part of a datum capability
• lock or unlock a capability
• create a new lock and key

The last three subclasses represent a departure from previous hardware capability systems.