yaml.safe_load is sufficient to read password settings.