User-defined protection subsystems in capability architectures