usb: cdc-acm: make sure a refcount is taken early enough