Update (10:10 22 July 2001 UTC)

It turns out that the missing opcode is gv. Changing to ...->permit_only(':base_core', 'gv') makes the prototype work.

I still have no idea why this is, and would appreciate any enlightenment a passing wizard could cast my way.

Also, what other (bad) things could be done with this opcode?