crypto: sanitize argument for format string