Adding security.js with 1st attempt at is_safe

Ongoing work