Document safe_roots and extensions