Don't declare unsafe local variables as safe

I didn't know anything about safe-local-variables until I started customizing ffip, so maybe I'm wrong, but it seems to me that by declaring these variables safe you're creating vulnerabilities that allow execution of arbitrary shell commands in the case of ffip-find-options, and arbitrary elisp code in the case of ffip-project-root-function.