xmalloc: put __hidden behind signature