It's probably more interesting to verify that it *doesn't* allow certain attributes. I think this happy-path behaviour is already tested in features?