Account.WriteTo wrote each buffer to the destination in full before trimming the byte count for --max-transfer, so up to one buffer past the limit could reach the wire and go unaccounted. This matters now that NoCloser forwards WriteTo. Truncate the write to the remaining allowance before writing.