I think I prefer whitelisting to blacklisting; if we add a new field, then it wouldn't be included in `FireplaceAppSerializer` unless we explicitly specify. That seems right to me.

It's a mild preference, though.