Securely composing dynamic queries with Ecto using values from database

Maybe you can use String.to_existing_atom/1 and handle ArgumentError accordingly