Use HookScript instead of SetScript to avoid tainting.