Adding to the whitelist seems a bit problematic as well. :update, :delete, etc.

It might be better to just maintain a list for each Rails version (I don't believe this list really changes much, if at all).