Exceptions filtering for nested params

Params filtering currently only accepts flat hash, but I reckoned there are times when using the 'form_for' tag the values are submitted as a nested hash and wouldn't get filtered.

For e.g
{:account => { :password => 'secrets' }}, the password would still remain as plain text.