I've done this but our code is still a bit different from the Pundit example, as the permitted attributes is done by inherited resources as seen here:
https://github.com/josevalim/inherited_resources/blob/master/lib/inherited_resources/base_helpers.rb#L321