Should be sanitized to varchar(36).