The unsafe is because `buf` is `[u8, ..32]`, and so a slice is `&[u8]`, and I need a `&str`. Since only alphanumeric characters are ever added to `buf`, the unsafe is safe.