Don't show user-provided data in error message