Each Sui capability is a separate object
CoinMetadata, TreasuryCap, DenyCap, and UpgradeCap do different jobs and can have different owners. The audit reads the objects associated with the selected coin type instead of treating security as one owner flag.