Actually, now that I think about it, it would be safer to at least blacklist some of the special SQLAlchemy attributes here. I'll update the pull request in a minute.