Be careful what you ask for: you might just get it.

In my last post, I asked how to enable the watchdog timer on the SAME54. I seem to have succeeded, but all too well: when I try to erase the chip using the Segger J-Link, J-Link Commander reports that it times out after 4.158 seconds, which is suspiciously close to the 4096 mSec that the WDT is set to.
So my MCU is effectively bricked. I suspect that the WDT is getting enabled at reset even though that wasn't my intention. Can someone guide me through the steps of manually writing the NVM bits to disable the WDT?
UPDATE: Looking at the NVM sector, 0x00804048 is the WDT Enabled byte and 0x00804049 is the WDT Always-On byte. Those values are loaded at reset into the WDT register. I used SEGGER J-Link Commander to reset those to 0 (their defaults), so theoretically they should be disabled. But this didn't make a difference: erase still times out.