Guard all attributes by default

Secure by default, so we don't end up with [Bender from the future](https://github.com/rails/rails/issues/5239).