fixes #184 and fixes #191: need to explicitly define if modules and extensions should be allowed to be run on client and/or server