Lint: Mark functions that deref raw pointer unsafe.

This changes the API, so put it in the next major version.

• https://rust-lang.github.io/rust-clippy/master/index.html#not_unsafe_ptr_arg_deref