Merge "Clarify Reference thread-safety properties"