renamed new_serial to safe_serial

new_serial is misleading because it might not be the serial that is eventually set on the SOA. safe_serial makes more sense because it's the serial that will be used to calculate next_serial.