Which brings up an interesting point. When I was running into similar problems, I tried forcing exceptions:
```ruby
config.action_controller.action_on_unpermitted_parameters = :raise
```
But I think there's a bug in Inherited Resources, because IIRC there were two params that it would always fail on.