perhaps use safe_load here?