Enabled with `-cheri-bounds=subobject-safe`. There are reports that it was causing instruction selection failures previously.