IO_sexp: remove reference to Unix.write_substring
Add -safe-string / -unsafe-string flags