As I understand it, you can give a user an "entitlement key" to be sent as part of a capability request. Such a key would have been generated previously by the back-end server and distributed to qualified customers, and then used in validating the c...