Verified Security Properties For The Capability-Enhanced Cheri-Mips Architecture