Sanitise the source so it works in a way that the host need not know the client public key.