Are (object) capabilities a Zero Trust Security implementation mechanism?

Ref:
http://searchcloudcomputing.techtarget.com/tip/Achieving-zero-trust-security
-in-the-cloud

For both kinds of caps, I come in as
+1

Next question is whether we have one or more good scalability stories...