utf8: don't allow NUL in decoded strings.