[sba] they added https, cool
remove sba from safe.yml, add state back in