mark some FFI calls as safe