Cursor scoping

Clarify when applications have to keep key/value buffers valid.

closes #607