diff --git a/protocols/schemas/auth.prs b/protocols/schemas/auth.prs
index 13a4d93..bdd583a 100644
--- a/protocols/schemas/auth.prs
+++ b/protocols/schemas/auth.prs
@@ -1,5 +1,5 @@
 version 1 .
-embeddedType EntityRef.Ref .
+embeddedType EntityRef.Cap .
 
 SshAuthenticatedUser = <authenticated @username string @service bytes>.
 
diff --git a/protocols/schemas/channel.prs b/protocols/schemas/channel.prs
index 0b335a5..5071148 100644
--- a/protocols/schemas/channel.prs
+++ b/protocols/schemas/channel.prs
@@ -1,5 +1,5 @@
 version 1 .
-embeddedType EntityRef.Ref .
+embeddedType EntityRef.Cap .
 
 SshChannelTypeAvailable = <channel-type-available @type bytes>.