Fixed bug: pointer to a sealed capability cannot be const (compiler tries to remove STORE(_CAP) permissions)
Neater macros for dealing with seals and JNIEnv calls