reimplement HOOK_SANITIZE (plugs before final removal of harmful tags)