Two sentences our security scanner can't tell apart and how we solved it with ML