safe intrusive collections with pinning: first draft