FFI, safe vs unsafe