@senhara I think this *is* their sanitization
@senhara (And I suspect that that password is getting string-interpolated into some kind of API call or shell command that goes into another system which needs to create a local account for every system-wide account, or something)