`IOStream` exposes unsafe constructor

```julia
julia> f = IOStream("abc", [0x01, 0x02]);

julia> read(f)

[161161] signal 11 (1): Segmentation fault
```

We should probably hide these constructors behind a non-exported name.