IO_sexp: remove reference to Unix.write_substring
Add -safe-string / -unsafe-string flags
Env: add stub for plugging external module finder
Add mechanism for auto loading unknown units from package paths