security: must not return non-zero from AggCheckCallContext for
ordered set functions, since this opens a security hole due to the
different calling convention.