capsudo provides a nice way of doing cross-container RPC: https://codeberg.org/kaniini/capsudo-rpc-demo
@poliorcetics the delegator receives access to a widely-scoped capability factory by way of accessing /run/capsudo-private/rpc to mint capabilities.
it then creates a new factory which narrows that capability to the equivalent of {/run/capsudo-private/rpc, echo-upper} by wrapping it in an invocation.