Instead of trying to handle ffs() with the normal rename-mark-hidden-and-alias

Instead of trying to handle ffs() with the normal rename-mark-hidden-and-alias
dance, mark it protected.  This works better for both gcc and clang: gcc
blocks overriding of internal calls, while clang permits inlining again.

ok otto@