allows pass through of non-sanitizable values