stop sanitizing tags

API docs seem to indicate this should not be necessary. And the current
sanitizer is overly strict
update pom and test