Unpermitted parameters, take 2