vcl: validate seg handle on migrate only if needed