Security primitives for DWBase: capabilities, trust, and gatekeeping.
The gatekeeper enforces per-worker capabilities and simple rate limits using a token bucket.