Force the presence of the unsafe keyword in the cpp_class macro

[ogoffart]

using cpp_class! can actually be unsafe if the C++ class invoke undefined behavior in its constructor or destructor, or if it is not relocatable, it is better if there is the unsafe keyword there.