[Haskell-cafe] Safe top-level IORefs