See above comment about sender being sanitized in dao