mitigate non-thread-safe race condition

Sure but the race window in `_GeoIP_setup_dbfilename` is a bigger problem that I haven't addressed yet (where malloc() is an expensive operation).