Suggestions: sanitise only_friends param