This line breaks. There is no Hash#permit! method. Anyway the entries are listed explicitly so no need to protect anything.