compartment and the --cap option