$autosave = sanitize(
  data        => param('autosave'),
  field       => 'Autosave',
  obligatory  => 0,
  max         => 2,
  value       => 'on', # not a regular expression; $checks{'data'} must eq "on"
);