This is going to be a security issue, we can't convert arbitrary inputs (parameter names on the request) to symbols as it can cause memory exhaustion.

Can we keep these entirely as strings?