This commit uses the internal helper SafeExec rather than using the Kernel class directly. It also adds a test to ensure that if the `-t` option is used, it will call SafeExec.