JSON:

{
...
    "capabilities": ["build"]
...
}

Response:

{
  "error": {"message":"unknown attribute: capabilities"}
}

Ultimately one should be able to PUT back the exact same object received on a GET in order to update the object.