Set safe instead of source in configuration

The configuration must have something in it, but maybe source is not
a good default.  The github pages help says it is overridden upon
deploy.