librustc: Disallow "unsafe" for external functions

r? @brson