sanitize all attributes in getters