Fix ALLOW_OPTIONS
Fix ALLOW_OPTION precedence
Don't be stupid

(That line doesn't even do anything.)
Disallow blank allow; set default to ALLOW_LEGACY