As of OpenZeppelin 2.0, the balances mapping is renamed _balances and visibility is set to private. You would have to use the new variable name and modify _balances to internal for this to work.

If you were to do this, you would need to ensure that you had enabled no other security holes.