GhostCell: separating permissions from data in Rust. - Joshua Yanovski; Hoang-Hai Dang; Ralf Jung 002; Derek Dreyer (Proc. ACM Program. Lang., 2021)