I think GROUP_SAFE is a good solution, it's nice and explicit, and has false positives (for them being dangerous) rather than false negatives, which can get people killed.