Adversary Safety by Construction in a Language of Cryptographic Protocols