/capability/securedFunction[@name=" "] CAMID(": ") setPolicy grant traverse grant CAMID(": ") traverse grant execute grant true