require a safe_yaml release with correct permissions. Fixes #137