If the code can be more than just the string hard-coded here, should we instead save the code itself? If it can't be more than this then why the `in` check?