# we know this is coming from XXX because of sub xxx, so we don't need an extra taint check here