simple object filter to only pass allowed keys