Safe Rust bindings for LMDB