Sanitize "well-known" ctrl API