Added attachments whitelisting to planning elements and sorted param

keys to make it a little bit more readable

Suggested changelog entry:

<pre> * `Permitted params whitelisting cleanup` </pre>