Only allow known alternatives as query param overrides

As reported by @ankane via email.