Calling `to_sym` on user input is normally a bad idea. Can you do this without calling `symbolize_keys` on the bare params?