`oneOf`: when using object as set,
  make sure prototype properties aren't accidentally hit