This needs to use `model_params` for security