Add Model.deny() and wildcard support.
Bump version to 1.2.0