Once we land #251, we'll have the ability to granularly require or permit UnsafeCells in different APIs. Currently the plan is to require UnsafeCells whenever references are being transmuted, but maybe that's not necessary when the references are mutable, as that disallows interior mutation anyway? This may depend on which aliasing model we choose (stacked borrows, tree borrows, etc), as some may disallow this.