initialization protection.

Libbson is pretty aggressive about warning the consumer of invalid API
use. However, that means that we short circuit some functions. This is
valid since consumers shipping invalid API use is nothing we can protect
against, but this will at least quiet some static analyzers.