Merge "base: replace raw pointers for out-parameters with safer out<T>"