tls1_set_groups_list: freeing *pext before overwriting