Improve safety by asserting that a sub is never called from a context
which is not allowed as per its okmask.

This is to ensure correctness of our compile- and runtime-checks.