Export the sanitize function and test it

The library now has a sanitize function (still empty) that returns an empty array when called with no args.