gofmt
Change the semantics of Safe. Replace old Safe with SafeFunc.