Remove sandbox exemption for umtx operations, which was added to support
userspace compartmentalised compositing: these allow sandboxed code to
perform synchronisation operations with global scope, which is undesirable.
We'll want to re-add capability-aware versions of these calls, or proxy
the operations (suitably constrained) through the system class.
Fix user-permission test cases: pass and fail had swapped permission setup.