allow the set of attributes considered safe by Cleaner to be overridden