Disable unsafe directives when rendering READMEs

rst_to_html is called by get_readme_to_display, which processes unsafe data;
so it should not allow inclusion of arbitrary files or arbitrary HTML.