Understand the `restrict` keyword in C99