We sanitize vcap_services but CloudFoundryVcapEnvironmentPostProcessor converts them to vcap.services.* which should also be sanitized.

Comment From: philwebb

We're going to add vcap.services to the sanitizer.