Apparently the pre-refactoring whitelist code did not correctly identify the interface defining a method.
Better to whitelist public getters than private fields.