pagemap: check permissions and capabilities at open time