explicitely saying what params are permitted - based on feedback