Give confined test children a blank home without replacing client auth
A confined executable tool that strips authentication can still need a usable home directory for ordinary application tests. Without one, home lookup may fall back to operating-system user databases that confinement denies. Provide a fresh empty home under that stage's allowed sc…