Describe a mechanism by which an operating system can enforce limited transfer of capabilities.
That is, process A might transfer a capability to process B, but A wants to prevent B from transferring the capability to any other processes.
Your design should include a description of the activities to be performed by A and B, as well as the activities performed by and the information maintained by the operating system.