Move validate_mem() so we don't recurse.  We call this function from
the DS_GET_FIRST_TUPLE and DS_VALIDATE_CIS calls, which are the the
first two functions which may be called by cardmgr or cardctl which
require CIS access.