Use yaml.safe_load, add bad yaml plugin test