Remove call to make policy_attributes private as helper_method takes care of hiding it from controller actions.