Use yaml.safe_load for config file parsing.

yaml.load() allows arbitrary code execution in the same manner as pickle, so it seems better to use yaml.safe_load() in this context.

I don't think there's an actual security issue, since the whole point of marteau is to run arbitrary code.  But better safe than sorry...