Fix "allow" value in Secure annotation to cast to array if string given