converted safety method to modifier; renamed safety() to _modifier(); removed ability to disable safety/modifier