add a missing strong param and reject attachment if unchanged!