implement _safe so unscorable is a little more lenient with rescoring (fine as long as next round not scored, i.e. rewriting history)
2.1.0