Anytime the operating system exposes a function that takes a parameter as "a string with some restrictions" it really needs to expose the function as requiring

Anytime the operating system exposes a function that takes a parameter as "a string with some restrictions" it really needs to expose the function as requiring a structure for that parameter, and the structure needs composition functions that make it impossible to create it incorrectly.