Check use of *const where *mut is appropriate in ffi

[bvssvni]

Whenever a pointer is mutated, *mut should be used instead of *const. This makes it easier to catch bugs that conflicts with the borrowing rules in Rust at higher level, such as #60