Unsafe::getUnsafe should allow the platform class loader to access it

Unsafe can only be used by boot modules (if VM::isSystemDomainLoader returns true). There are existing (or planned to be) platform modules that would also like to use it. Maybe the restriction can be relaxed.