fix a really subtle bug in the cross section of aliases and TLS: