KEYS: Fix use-after-free in assoc_array_gc()