* Non-local `return` within a block leads to confusing control flow. Can check for the param filter in the env first, then instantiate the `ParameterFilter`.
* Security by default. If the param filter is missing from the env, filter all params.