Secure Distributed Programming with Object-Capabilities (Mark S. Miller, Google)(youtube.com)