Rust: Fixed-capacity view of Vec to reduce `unsafe` in production code

internals.rust-lang.org