bindings: avoid UNWIND-PROTECT in foreign callbacks