Use after free when receiving duplicate CAP found.
https://irssi.org/security/irssi_sa_2019_08.txt
Most servers do not send duplicate CAP