don't populate sanitized.safe by default

since it's potentially expensive.

walk nodes in is_safe
testing for sanitize