add checker cms.ThrUnsafeFcallChecker which flags calls to known thread unsafe functions