api: improve api string safety