fails:Kernel#to_s returns an untrusted result if self is untrusted
