Should call `sanitize_sql_for_conditions`