Require negative capability on a Mutex before locking it and pass it through.
Declared in <sync.h>
<sync.h>
Mutex* MaybeCheckNotHeld(Mutex* cs);
The same mutex pointer.