InputSanitizer::Sanitizer.clean now always returns an instance of InputSanitizer::RestrictedHash