We keep s as a pointer to the start of an unaltered section and
move e to be able to call VSB_bcat() when a backslash is encountered
or substitution is complete.