Add FIXME for std CheckedSub replacement for safe_sub.
Implementations and tests for u64, u32, u16, and u8.