The FPL OSS community is orders of magnitude more vibrant than the OSS secure operating system research. I don't know of any living projects that use the object-capability model at the OS level (plenty of language level and higher level stuff going on).

For some of the background, Rob Pike wrote an old paper on the state of system level research.