pub(crate) fn format_unsafety(unsafety: Unsafe) -> &'static str