audit: treat s_id as an untrusted string