Pin safe_yaml to 0.9.3 until upstream resolves 0.9.4 perms issue.