RFC: Unsafe fields.

Add `unsafe` fields. Unsafe fields are declared in the definition of a
struct by prefacing them with `unsafe`, and a public `unsafe` field is
prefixed with `pub unsafe`. Accessing an `unsafe` field is `unsafe`.