I think we need to check if [protected_attributes](https://github.com/rails/protected_attributes) is in use here, otherwise this will break for people upgrading without switching completely to strong_parameters.