Add 'save_global' and 'save_ephemeral' test cases to exercise checks that
prevent storing ephemeral capabilities to global storage in sandboxes.  The
tests work but the latter does not yet pass due to a possible bug in signal
handling within sandboxes.