Pošljite SMS: Analysing the Security Properties of Object−Capability Patterns