Why do we not want `not-allowed` here?