Deny unknown fields in RPC requests

[masih]

For RPC calls that implicitly assume a default set of parameters, we should check for any unknown fields in the request to avoid potential foot-guns

Context: ChainSafe/forest#5600