Safe exploration in reproducing kernel Hilbert spaces