#339: do not allow non-hashref parameter sets, to depth 2