It's also used in `unpermitted_keys`. Not sure I agree that passing it around is better than saving it as an instance variable anyway.