Why don't we pass the block to `permitted_params` itself? Something like:
```ruby
controller do
  define_method :permitted_params do
    params.permit config.resource_name.singular.to_sym =>
                  block ? instance_exec(&block) : args
  end
end
```
That way the block actually gets run on every request.