use AST/evalidate for safer eval

[beckermr]

We might look into tightening what we allow to be eval-ed in selectors using the python AST. See this package (https://github.com/yaroslaff/evalidate) for an example implementation.