libcli: Add a comment explaining lack of overflow checks