There is otherwise no valid use case to peek inside the workspace.

Only vmod_blob would grab the front pointer before making its
reservation, but ultimately grabbing the front pointer because it
needs it for a reservation, proving the point.

Initially caught by wssan from #3320.