In the new world order, capabilities derived from NULL have zero length
rather than global scope, so cheri_maketype() can't set their length to
1.  Instead, use a stack pointer as the input to cheri_maketype() when
triggering a seal-permission exception in a test case.