Enviar por SMS: Analysing the Security Properties of Object−Capability Patterns