Make `hotfix merge` use `run_safe` no more than twice.