clarifying readme, with pending section for safe.yml