inline call specs (ie, Call_cfg -> Spec_cfg) once per symexec