at_time is sanitized