Գրեք սա: Analysing the Security Properties of Object−Capability Patterns