[jedberg]

By the time it hits the C code it should be sanitized, but yes, it does add some security overhead.