Support out parameters in Safe proxies

Close #2