users:  has uid, name, login.
capabilities:  has capid, name, and a default (bool).
user_capabilities: has uid, capid, and a bool.