further clarification: unsafe_to_string may be called on shared (immutable) bytes