librustc: Implement a lint mode for mutable structures; deny by default. r=tjc