One example suggestion from wfh@ is that we could validate which capabilities services require against the capabilities provided by the services they're requiring them from.