be specific about what characters are allowed