Use an unlikely sentinel

[lionel-]

e.g. as.symbol(".__exhausted__."). This symbol should never appear literally in code or be stored in static objects. This way we can loop over symbols e.g. in a namespace without risking unexpected exhaustion.