Remove safe_sub because libstd has CheckedSub and Option.unwrap.