Applies capability exposure rules to a descriptor set.
Candidate capabilities.
Policy rules used to include or exclude capabilities.
Filtered capability set.
Applies capability exposure rules to a descriptor set.