Make objects read-only, once they have been stored.

Now that we have a proper purge-mechanism, all the magic to
set obj.{ttl,grace,keep} in vcl_hit{} can go away.