Document what is unsafe in WorkQueue work functions.
Merge remote-tracking branch 'upstream/master'