fossil user capabilities has no validation of permissions string