sanitize for immutable