Sipi Capabilities for Secure Data Destruction