don't cloak non-json vars