Only log forbidden attributes in production