[$] mseal() gets closer

The proposed mseal() system call
stirred up some controversy when it was first posted in October 2023.
Since then, it has been evolving in a quieter fashion, and seems to have
reached a point where the relevant commenters are willing to accept it.
Should mseal() be merged in a future development cycle, it will
look rather different than it did at the outset.