Stop applying the untrusted-input element bound to our own descriptors (#332)