This has the comment `How paranoid should we be?' but in fact the
paranoia level (such as it is) is set by which entrypoint we call. It
would not be appropriate to make this a buffer property anyway.
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>