 This inevitably leads to such programs
being subject to the Confused deputy problem.The term "ambient authority" is used primarily
to contrast with capability-based security (including object-capability models),
in which executing programs receive permissions
as they might receive data, as communicated first-class object references.This allows them to determine where the permissions came from,
and thus avoid the Confused deputy problem.