make setup.sh safe