RFC: conventions for placement of unsafe APIs