From CHERI ISA v7. 2019.
Permissions is required to read special purpose capability registers, but CR3 is not included since it is not a capability register.
If you could revise
the fundmental principles of
computer system design
to improve security...
... what would you change?