Make sure you can't save arbitrary fields