rustdoc: functions in ffi blocks are unsafe