move capabilities provisioning helpers to context/user modules
it makes much more sense to have those in there, especially since there are now two implementations of those.
it makes much more sense to have those in there, especially since there are now two implementations of those.