talloc_stack: make sure we never let talloc_tos() return ts->talloc_stack[-1]