Serde's zero-copy borrowing can be treacherous