diff --git a/Gemfile b/Gemfile
index f95b4e4a..1ce660b8 100644
--- a/Gemfile
+++ b/Gemfile
@@ -66,7 +66,10 @@ gem 'sass-rails',    "~> 4.0.5"
 gem 'compass-rails', "~> 1.0.3"
 gem 'uglifier',      ">= 1.0.3"
 
+# Backfills for old Rails behaviors
+# TODO: Would be nice to become canonical and not need these!
 gem 'rails-observers', '~> 0.1.5'
+gem 'protected_attributes', '~> 1.1', '>= 1.1.4'
 
 group :development do
   gem 'capistrano', '~> 2.15.5', require: false
diff --git a/Gemfile.lock b/Gemfile.lock
index fadedcb4..032ed0e0 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -147,6 +147,8 @@ GEM
     orm_adapter (0.5.0)
     parallel (1.13.0)
     passenger_monit (0.1.1)
+    protected_attributes (1.1.4)
+      activemodel (>= 4.0.1, < 5.0)
     rack (1.5.5)
     rack-attack (2.2.1)
       rack
@@ -287,6 +289,7 @@ DEPENDENCIES
   openneo-auth-signatory (~> 0.1.0)
   parallel (~> 1.13.0)
   passenger_monit (~> 0.1.1)
+  protected_attributes (~> 1.1, >= 1.1.4)
   rack-attack (~> 2.2.0)
   rails (= 4.0.13)
   rails-i18n (~> 4.0, >= 4.0.9)
diff --git a/vendor/cache/protected_attributes-1.1.4.gem b/vendor/cache/protected_attributes-1.1.4.gem
new file mode 100644
index 00000000..db05283b
Binary files /dev/null and b/vendor/cache/protected_attributes-1.1.4.gem differ