Added security->forbiddenAction config option