Safe global optimization of expensive noisy black-box functions