CREATE TABLE IF NOT EXISTS user_capabilities (
    user_email  TEXT                     NOT NULL,
    capability  TEXT                     NOT NULL,
    granted_by  TEXT,
    granted_at  TIMESTAMP WITH TIME ZONE DEFAULT now(),
    PRIMARY KEY (user_email, capability)
);