outgoing_create() doesn't take ownership of the message in all error cases.
nta_msg_tsend() wasn't robust to this.