because the push phase of unpending happens outside the tree lock, we
need to ensure only one thread is ever entering unpending

this is in preparation for future changes, right now, unpending is only
ever called from the topreq thread