IMO you should validate/sanitize for each service individually