librustc: Disallow "unsafe" for external functions