Use the __DECONST macro rather than hand rolling it.
Obtained from: CheriBSD MFC after: 1 week Sponsored by: DARPA, AFRL