Capability Machines