Treat raw attribute values as trusted data

Fixes #18