l4_capability_control works well for almost all system calls using a buffer pointer to the capability that it operates on. Only for sharing/granting of capability lists, it is yet to be decided how to provide a grant target id.