Force render_safe_globals context

Web pages no longer need to parse `exec_safe_globals` — `render_safe_globals` is sufficient for the use case.