Sealed Capability Types for CHERIoT