Add permit option to exposures for strong_params.

I'm a noob and couldn't get the specs Inflector mock to play ball..
"no implicit conversion of Symbol into String"

But, the implementation is behaving as I expect.