better `sanitize`