ATG9A protects the plasma membrane from programmed and incidental permeabilization