I think we should whitelist here not blacklist - it is quite easy to add a new model and forget, and expose PII.