This is follow-on work from  Issue 633030 . If possible, we should move heap metadata out-of-line, for better protection against non-arbitrary out-of-bounds writes.