Require --i-know-its-unsafe for some unsafe actions
stop profiling before printing profiling stastics
safe: only rerandomize when the safe has been changed
cmd_init: check earlier whether the safe already exists