Since mbvalidate() can alter the string it validates, having the
callers claim that the strings they accept are const is inappropriate.