Some notes on Rust, mutable aliasing and formal verification