layout: Reference count flows, and forbid unsafe code in many places.