limit possible checkouts with server_allow config