std::rt: deny(unused_unsafe)