don't allow decoding surrogate pairs