SanitizableString should be a value class