Decap: Deprivileging Programs by Reducing Their Capabilities