selftests: add memfd_create() + sealing tests