Calling to_sym on user input opens code up for DoS attacks