ffi: keep FFI functions non-constructible