Item 38: Control what crosses FFI boundaries