Add check for yaml load

Adds a check for unsafe uses of `YAML.load`, which as we saw with CVE-2013-0156, is a bad thing.