A safe ncurses wrapper for Rust