pub fn check_capabilities( declared: &[String], level: TrustLevel, ) -> Result<(), CapabilityViolation>