Sanitize all fields, even sub-hashes