Add test cases that check whether nesting is prohibited

The kernel should deny attempts to nest resources in ways that are not
supported.