Restrict Buffer access so that refcounting is mutexed by BufferPool.