Be extremely anal about when we allow buffered syscalls.

Written when diagnosing problem in #735, though the bug ended up being a dumb typo.  I think this is worthwhile to have anyway.