winbindd_cache: don't leak state_path onto talloc tos