make the lib depend on bytes; now compliant with -safe-string