librustc: Implement a lint mode for mutable structures; deny by default