safeN_det: whole-program safety that more closely matches VST
Prove that, for deterministic languages, safeN_det implies safeN.