- Patch #681782 by Dave Reid: 'clean' option in token_replace() does not do anything.
Sleep better after a security review.