Checking the string for validity is not enough, actually bailing out if
it is invalid is better...