lib: avoid creating a throw away object in `validateObject`

This also avoids unexpected behavior if Object.prototype.allowArray et al. is not undefined.