Cado permits the delegation of capabilities to users. Cado is a capability based sudo. Sudo allows authorized users to run programs as root (or as another user), cado permits authorized users to run programs with specific (ambient) capabilities.