`attributes_for` isn't really a public api.