Parameters
- capability:
| "relay:read"
| "relay:write"
| "cache:read"
| "cache:write"
| "hotkey:forward"
| "state:read"
| "state:write"
| "identity:read"
| "keys:bind"
| "keys:forward"
| "media:control"
| "notify:send"
| "notify:channel"
| "theme:read"
| "config:read"
| "resource:fetch"
| "cvm:call"
| "outbox:read"
| "outbox:write"
| "upload:write"
| "intent:read"
| "intent:write"
Returns string
Formatted denial string, e.g., 'denied: relay:write'
Format a denial reason string with the standard 'denied:' prefix.