If data is not pure json object and contains functions, they will be returned by Object.keys. Do we need to protect ourselves against this?