thread_group_cputime: move a couple of callsites outside of ->siglock