diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index ac36c0522e..c092ce9c3b 100644
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -776,7 +776,7 @@
 - project: openinfra/ansible-role-refstack-client
   description: Ansible role to manage refstack-client
   use-storyboard: true
-  acl-config: /home/gerrit2/acls/osf/refstack.config
+  acl-config: /home/gerrit2/acls/openinfra/refstack.config
 - project: openinfra/edge-computing-group
   description: General repository for the OpenInfra Edge Computing Group
   use-storyboard: true
diff --git a/tox.ini b/tox.ini
index cb579af14f..e002707e38 100644
--- a/tox.ini
+++ b/tox.ini
@@ -49,7 +49,7 @@ commands =
     ansible-playbook --syntax-check -i {toxinidir}/tests/inventory \
     -e @tests/vars.yaml \{\} + > /dev/null"
   # Make sure site-variables at least parses
-  python -c 'import yaml ; yaml.load(open("zuul/site-variables.yaml", "r"))'
+  python -c 'import yaml ; yaml.safe_load(open("zuul/site-variables.yaml", "r"))'
 
 [testenv:gerrit]
 deps =