use safe_load for yaml

Seems like a good idea.

Signed-off-by: Andy Grover <agrover@redhat.com>