ok i guess we can get rid of sanitize() for real this time.