def __init__(self, account_sid, auth_token, nbf=Jwt.GENERATE, ttl=<NUM_LIT>, valid_until=None,<EOL>**kwargs):
super(ClientCapabilityToken, self).__init__(<EOL>algorithm='<STR_LIT>',<EOL>secret_key=auth_token,<EOL>issuer=account_sid,<EOL>nbf=nbf,<EOL>ttl=ttl,<EOL>valid_until=None,<EOL>)<EOL>self.account_sid = account_sid<EOL>self.auth_token = auth_token<EOL>self.client_name = None<EOL>self.capabilities = {}<EOL>if '<STR_LIT>' in kwargs:<EOL><INDENT>self.allow_client_outgoing(**kwargs['<STR_LIT>'])<EOL><DEDENT>if '<STR_LIT>' in kwargs:<EOL><INDENT>self.allow_client_incoming(**kwargs['<STR_LIT>'])<EOL><DEDENT>if '<STR_LIT>' in kwargs:<EOL><INDENT>self.allow_event_stream(**kwargs['<STR_LIT>'])<EOL><DEDENT>
:param str account_sid: The account sid to which this token is granted access.
:param str auth_token: The secret key used to sign the token. Note, this auth token is not
                       visible to the user of the token.
:param int nbf: Time in secs from epic before which this token is considered invalid.
:param int ttl: the amount of time in seconds from generation that this token is valid for.
:param kwargs:


:returns: A new CapabilityToken with zero permissions