groupdb: don't leak state_path onto talloc tos