use yaml.safe_load, not yaml.load!