Fix safe pragma for struct; it requires special handling of the `rterror::TheControlFlow` object

The problem was that we might or might not have the rterror::TheControlFlow object in our generated struct functions, depending on whether -check p was enabled, and depending on whether the module was marked as safe. This second case was not handled yet.