runtime: Hide symbols for mutex / once / TLS key