Fixes issue #579: AccessControl deny rule by default