spa_open has namespace mutex recursion checks for vdev unloading time, but
on OSX, this comes as a separate thread (IOkit) so we need a little extra
protection.