A user might have an attribute that can take an array as it's value, so just checking that value is an array is not specific enough; check specifically for composite keys object