bamboo-capabilities.properties file on the agent server can specify capabilities that get registered with Bamboo when the agent server starts. However, the agent server still uses the agent server's environment variables to list additional capabilities on the machine and does not limit the listing of capabilities to only what it specified in the bamboo-capabilities.properties file. Perhaps create a flag in this file to enforce the limitation such as:

enforce_these_capabilities=true