lock down acts_as_taggable