From what I've read any ROM that you would like to run with safestrap needs to have the same firmware (i.e. I535VRUCML1) which doesn't appear in CM until CM11. I would suggest trying to use a d2lte nightly in rom-slot-1 though you shouldn't take my word for it because I haven't tried this method.