Whitelist publicly visible attributes

Safer than blacklisting the internal ones