Since, Dat protocol is a global singleton protocol, the Capability URI representation would have an empty capability_authority section. For example:
cpblty:@dat:778f8d955175c92e4ced5e4f5563f69bfec0c86cc6f670352c457943666fe639
This would required updating specification to allow capability_authority to be empty. It just so happens that hex is already base64url encoded (^_^ ).
This can be deferred until such time where Dat protocol links are used within Capability URI implementations.