Apply StM m a ~ a constraint throughout the Safe module
CPP to disable Safe module when built with older monad-control