Why is it difficult to revoke capabilities?

• A. They are too many
• B. They are not defined precicely
• C. They are distributed throughout the system
• D. None of the mentioned