"May contain" should provide legal protection. It may be compliance tits in some cases, but that's better than forcing the addition of a compliance ingredient.