Use a more secure JSON instead of ad-hoc python eval (ON-202)