Separate required key capability variables for users and hosts.