use `!config.isSafe(operation)`