Clarify security model with regard to pointer _count fields.