add forbidden attributes spec