Lifetime Safety in C++: Past, Present and Future