test/security: check capabilities get