Fix overly permissive borrow checking rules for `&mut &mut`

See #8624 for details.

r? @pnkfelix