fix allow statements
don't set a minimum id/gid number
bump version