If cve-rs exists, is safe rust safe? Can one prove that Rust code is safe only by auditing the unsafe blocks?