add unsafe parameter to migrate

disabled by default (similar to live migration)

may want to force live migration to be disabled when unsafe is set