no longer uses eval and read-string; now uses load-file (which is just
as bad)