librustc: Forbid `&` pointers (other than `&'static`) inside `@` boxes.

r? @brson