gemfile: manually add safe_yaml