Only deny when not ok