BLACKOUT: Data-Oblivious Computation with Blinded Capabilities