45a50dc906
Reject any key not in the explicit allowlist before writing to the database, preventing arbitrary configuration injection by a malicious admin.