added clarification on how to use now protected allow_*