start plugging in safe dir, etc; use safe_join