pub fn capability_matches_resource_subscription( cap: &CapabilityToken, uri: &str, ) -> Result<bool, KernelError>