A Case Study in Rewriting a Critical Service in Rust