Use ast.literal_eval to implement safeEval

Fixes https://github.com/behdad/fonttools/issues/75