`safe[]` and rchk

[krlmlr]

rchk gives a warning of the form

ignoring variable df as it has address taken, results will be incomplete

if used in a function wrapped with safe . I wonder if we really need the && when forwarding arguments, I haven't investigated further.