set safeexec binary in config