I think 'restrict' is a safer default