Prohibit unsafe request access at compile time.

Instance-per-request only works for direct request access.  We can't
fix indirect request access that way.  As a bonus, we get rid of the
clone hack.