add sanitize_callback arg to allow custom sanitization