matcher :only_permit_through_filters do |*filter_whitelist|
        match do |policy_class|
          permitted_through_filters = permitted_through_filters(policy_class)
          @incorrectly_permitted = permitted_through_filters - filter_whitelist
          @incorrectly_denied = filter_whitelist - permitted_through_filters