Looks like everything goes through `cjson_util_vlookup`, so it should be safe to mutate the path. Otherwise maybe only the callers that don't want the path mutated should do the copy to optimize the common case.